CVE WATCH / VULNERABILITY DETAIL

CVE-2026-121035

CRITICALCVSS 9.6NVD feed

Published 3 November 2026 · tracked since 4 November 2026

Description

Use after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools